Hi,

I have to implement a Tiered Security section on our web site.

There will be at least 3 levels:

Level 1, any visitor cannot see Level 2 or 3 pages

Level 2, can see level 1 & 2 pages

Level 3, Can see all pages

Of course the admin we'll call level 10.

Also is it posible to have a Java Menu on all pages?

Thanks

Rich

Comments

mollyclare’s picture

Hi Rich,
Define a Role (Administer > User Management > Roles) for each one of your levels. When you look at the permissions page (Administer > User Management > Access Control), you are able to specify what each one of these roles can and cannot do. Drupal is actually a great choice for a site that needs really fine control over permissions.
I take it you mean a JavaScript menu? I think you could put it in a block, which you would then set to show on all pages. I haven't tried this, but I don't see any reason why it wouldn't work.
Good luck!
mollyclare

Hawkcode’s picture

Went into the demo and was looking at the Access control and did not see a way to limit some users from seeing certain pages.

Also I looked where one creates a page and sets Access rights for that page and couldn't find this either.

Thanks

nancydru’s picture

On top of the core access controls, there are several access control modules. I personally use TAC_Lite which uses a taxonomy to further define access rights. It sounds like you need to check these modules out.

Nancy W.
Drupal Cookbook (for New Drupallers)
Adding Hidden Design or How To notes in your database

Anonymous’s picture

We use the TACLite module to accomplish what your talking about. It allows you to define some terms in a taxonomy and use them to set permissions.

http://drupal.org/project/tac_lite

Doug

themselves’s picture

Or alternatively you can write your own permissions module. If you have a very limited and specific set of permission requirements, writing a module is very straight forward. All you really need to do is implement hook_menu() with a (!$may_cache) block of code. See http://api.drupal.org/api/5/function/hook_menu for more details.

From there, all you need to do is work out if the current user (whose details are all stored in the global $user array) can actually view the current node, and then do the appropriate thing. It can be as simple as forwarding them to a permission denied page with drupal_goto(). I found the current tangle of user access modules to be a little overwhelming, and while I fully accept that they are neccessarily broad in their capabilities to cater to the largest possible number of users, if your needs are very basic (as were mine), then it is sometimes easier to write your own module. Don't be scared of the Drupal module system, once you wrap your head around a few basics, it is really very easy to work with.

Hawkcode’s picture

If I don't do this with Drupal I have to put code in half the pages on our site to check permissions, The thing is I'm not sure what would be faster, Learning Drupal, (which I have heard many good things about), and converting our site to Drupal or jyst adding the code.

I like the Idea that other people could update things, as our site now is maintained only by myself with dreamweaver.

Any thoughts.

nancydru’s picture

Trust me, you won't be disappointed converting to Drupal. I had two sites that I had done with Dreamweaver and I converted both of them to Drupal in less than two weeks. I have since added features to them that you couldn't dream of in Dreamweaver. I hardly use Dreamweaver at all any more.

Nancy W.
Drupal Cookbook (for New Drupallers)
Adding Hidden Design or How To notes in your database

Hawkcode’s picture

Could you be a little more specific...

How easy is it to design pages?

We have a lot of pages that have links to PDF files, is it easy to keep files like this updated, they change a lot.

I'm still real new to CSS, how easy is it to design pages and layout?

What kind of features have you added that woulld be hard in DW?

What potential Disadvantages are there?

What us a good site to help me decide?

Of course I still have to get this approved by the brainless management!

Thanks

Rich

nancydru’s picture

I don't think I can help much with management. But I bet if they saw that even they could submit content, they might come around.

Designing pages is largely a no-brainer - you don't. You create a theme for the site. Then you just create content. The site theme takes care of the rest. And don't worry there are so many themes, you're sure to find one that's a good starting point.

Pages with links: there are several ways to approach this, and I'd have to know more about your specifics. But any of the ways in Drupal will be, at the worst, no harder. Some ways would be automatic.

CSS is something you'll probably want to study up on. Now that is one area where I find DW still slightly helpful, but there are supposedly better tools for CSS out there. You will most likely be playing with some CSS in Drupal because it is more standards oriented.

I've added all kinds of database stuff that I just couldn't do in DW. I'm sure some people could. But Drupal is built around a database so it's always available and much of what I need to do is already there.

Disadvantages: database responsiveness, everything in Drupal hits the db - you'll have to get along with your DBA. Since Drupal is a php application, it can be a CPU hog, but usually only in very large sites. Oh, yeah, it's not quite as WYSIWYG as DW, but you can add modules to give you a WYSIWYG editor. Personally I don't miss that at all.

Sample sites: um, this one - it's a very large site. Also go to the spotlight forum, there are new sites everyday that get highlighted.

Nancy W.
Drupal Cookbook (for New Drupallers)
Adding Hidden Design or How To notes in your database

Hawkcode’s picture

Your forgot the sample sites:

"Sample sites: um, this one - it's a very large site. Also go to the spotlight forum, there are new sites everyday that get highlighted."

Thanks for the info.

Rich